[
https://issues.apache.org/jira/browse/AMBARI-9917?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14347853#comment-14347853
]
Hudson commented on AMBARI-9917:
--------------------------------
ABORTED: Integrated in Ambari-branch-2.0.0 #4 (See
[https://builds.apache.org/job/Ambari-branch-2.0.0/4/])
AMBARI-9917. Kerberos: Add Host did not generate keytabs (rlevas) (rlevas:
http://git-wip-us.apache.org/repos/asf?p=ambari.git&a=commit&h=0fddaacb5e163cda2851b499915bb9c6fff4c927)
*
ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariManagementControllerImpl.java
*
ambari-server/src/main/java/org/apache/ambari/server/controller/KerberosHelper.java
*
ambari-server/src/test/java/org/apache/ambari/server/controller/KerberosHelperTest.java
> Kerberos: Add Host did not generate keytabs
> -------------------------------------------
>
> Key: AMBARI-9917
> URL: https://issues.apache.org/jira/browse/AMBARI-9917
> Project: Ambari
> Issue Type: Bug
> Components: ambari-server
> Affects Versions: 2.0.0
> Reporter: Robert Levas
> Assignee: Robert Levas
> Priority: Critical
> Labels: kerberos
> Fix For: 2.0.0
>
> Attachments: AMBARI-9917_branch-2.0.0_01.patch,
> AMBARI-9917_trunk_01.patch
>
>
> 1) using build 440
> 2) three node cluster, hdfs, yarn, mr, tez, hive, zk, pig, ams
> 3) setup nnha, rmha
> 4) enabled kerb
> 5) all is good
> 6) added second hive metastore
> 7) added second hiveserver2
> 8) all is good
> 9) added host with DN and clients
> 10) keytabs are not created on the new host. i was not prompted for kdc
> creds. basically, i did 1-9 all in one shot, never logging out.
> As a workaround #1:
> - Attempted to regen keytabs, with "missing only" checkbox checked. it looks
> like it remade all principals and keytabs for the cluster but didn't
> distribute the keytabs. That is concerning that this might be an additional
> issue for another JIRA maybe. Anycase: didn't result in getting keytabs on my
> new host.
> As a workaround #2:
> - Attempted regen keytabs all. Made all princs and keytabs and distributed
> for cluster hosts except my new host. So no lock here either.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
